10 actions in 9 pieces of software · ranked by words, meaning and measured trust · 707 ms

1. 1safety-guardverified and signedpassport

   skillaffaan-m/eccrecord

   • safety-guard

     Guard against destructive operations with three modes: Careful intercepts dangerous commands (rm -rf, git push --force, DROP TABLE) for confirmation, Freeze locks writes to one directory, and Guard combines both via PreToolUse hooks. Use when working on production systems, running agents autonomousl

2. 2x402 Bazaarverified and signedpassport

   agentrecord

   • B20 Guard

     Real-time alerts the moment a B20 token turns seizable

3. 3deskpet-guardfound in code, not yet checkedno passport yet
   • guard_events

     读取最近的可疑外传事件（来自只追加的 guard-events.jsonl）。用于跨 agent 审计与自查。

   • guard_status

     查看 deskpet-guard 的当前守护状态：agent 进程数、外发连接数、打包产物数、探针健康度、最坏告警等级与候选处置目标。

4. 4sap-security-scannerfound in code, not yet checkedno passport yet

   MCP serverkarthikprakash7/sap-security-scanner

   • scan_project

     Scan a BTP project directory for CVEs, secrets, and BTP misconfigurations.

5. 5payment-guardfound in code, not yet checkedno passport yet

   MCP serverdivyanshtiwari20/payment-guard

   • verify_audit_integrity

     Walk the entire audit hash chain, recompute every hash, and report whether any

6. 6mcp-guardfound in code, not yet checkedno passport yet

   MCP serverarunmm8335/mcp-guard

   • name

     description

7. 7prompt-guardverified and signedpassport

   skilluseai-pro/openclaw-skills-securityrecord

   • prompt-guard

     Detect and neutralize prompt injection attacks in OpenClaw skill content, user inputs, and external data sources. Prevents instruction hijacking and context manipulation.

8. 8receipts-guardverified and signedpassport

   skillopenclaw/skillsrecord

   • receipts-guard

     Capture and verify all agreements before your agent accepts them. Local risk analysis and evidence capture for autonomous transactions.

9. 9lazy-guardfound in code, not yet checkedno passport yet
   • simulate_tx

     Dry-run a base64 serialized transaction against the configured RPC.